/* * SPDX-License-Identifier: ISC * * Copyright (c) 2010-2016 Todd C. Miller * * Permission to use, copy, modify, and distribute this software for any * purpose with or without fee is hereby granted, provided that the above * copyright notice and this permission notice appear in all copies. * * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */ /* * This is an open source non-commercial project. Dear PVS-Studio, please check it. * PVS-Studio Static Code Analyzer for C, C++ and C#: http://www.viva64.com */ #include #include #include #include #include #include #include #include #ifdef NEED_RESOLV_H # include # include #endif /* NEED_RESOLV_H */ #include #include #include "sudoers.h" #include "interfaces.h" static struct interface_list interfaces = SLIST_HEAD_INITIALIZER(interfaces); /* * Parse a space-delimited list of IP address/netmask pairs and * store in a list of interface structures. Returns true on * success and false on parse error or memory allocation error. */ bool set_interfaces(const char *ai) { char *addrinfo, *addr, *mask, *last; struct interface *ifp; bool ret = false; debug_decl(set_interfaces, SUDOERS_DEBUG_NETIF); if ((addrinfo = strdup(ai)) == NULL) debug_return_bool(false); for (addr = strtok_r(addrinfo, " \t", &last); addr != NULL; addr = strtok_r(NULL, " \t", &last)) { /* Separate addr and mask. */ if ((mask = strchr(addr, '/')) == NULL) continue; *mask++ = '\0'; /* Parse addr and store in list. */ if ((ifp = calloc(1, sizeof(*ifp))) == NULL) { sudo_warnx(U_("%s: %s"), __func__, U_("unable to allocate memory")); goto done; } if (strchr(addr, ':')) { /* IPv6 */ #ifdef HAVE_STRUCT_IN6_ADDR ifp->family = AF_INET6; if (inet_pton(AF_INET6, addr, &ifp->addr.ip6) != 1) { sudo_warnx(U_("unable to parse IP address \"%s\""), addr); free(ifp); goto done; } if (inet_pton(AF_INET6, mask, &ifp->netmask.ip6) != 1) { sudo_warnx(U_("unable to parse netmask \"%s\""), mask); free(ifp); goto done; } #else free(ifp); continue; #endif } else { /* IPv4 */ ifp->family = AF_INET; if (inet_pton(AF_INET, addr, &ifp->addr.ip4) != 1) { sudo_warnx(U_("unable to parse IP address \"%s\""), addr); free(ifp); goto done; } if (inet_pton(AF_INET, mask, &ifp->netmask.ip4) != 1) { sudo_warnx(U_("unable to parse netmask \"%s\""), mask); free(ifp); goto done; } } SLIST_INSERT_HEAD(&interfaces, ifp, entries); } ret = true; done: free(addrinfo); debug_return_bool(ret); } struct interface_list * get_interfaces(void) { return &interfaces; } void dump_interfaces(const char *ai) { const char *cp, *ep; const char *ai_end = ai + strlen(ai); debug_decl(set_interfaces, SUDOERS_DEBUG_NETIF); sudo_printf(SUDO_CONV_INFO_MSG, _("Local IP address and netmask pairs:\n")); cp = sudo_strsplit(ai, ai_end, " \t", &ep); while (cp != NULL) { sudo_printf(SUDO_CONV_INFO_MSG, "\t%.*s\n", (int)(ep - cp), cp); cp = sudo_strsplit(NULL, ai_end, " \t", &ep); } debug_return; }